AMENDMENTS TO THE CLAIMS 

Please amend the claims as indicated hereafter. [ Strik e through is 
used for deleted matter (or double square brackets "[[]]" is used if the 
strikethrough is not easily perceivable, i.e., "4" or a punctuation mark) and 
underlined is used for added matter.] 

1. (Currently amended) A method of delivering and determining the 
authenticity of a digital document sent by an unknown sender to an intended 
recipient at a printout station, the method comprising: 

receiving and securely retaining a digital document and a transmitted 
independently verifiable data record of the intended recipient at a printout 
station, an encrypted digest of the document created by the sender using a 
hash algorithm, the digest being encrypted using a first token of the sender; 

obtaining a second token of the sender relating to the first token of the 
sender; 

obtaining a first token of the intended recipient; 

decoding the encrypted digest using the second token of the sender; 

using a hash algorithm to create a digest of the document; 

comparing the decrypted received digest with the newly created digest 
to determine the authenticity of the sender and the document; 

requesting proof of the intended recipient's identity at the printout 
station using data in the independently verifiable data record of the intended 
recipient; 

decoding encrypted identification data with the first token of the 
intended recipient, the encrypted identification data being identification data 
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from the independently verifiable data record that is encrypted using a second 
token of the recipient by a transmitting station; 

comparing the decrypted identification data with contents of the 
independently verifiable data record to determine the authenticity of the 
recipient of the document; and 

releasing the document when the intended recipient has proved their 
identity by use of the second first token of the intended recipient that is 
uniquely related to the fiFst second token of the intended recipient. 

2. (Original) A method according to Claim 1, wherein the receiving step 
comprises receiving a digital certificate of the sender. 

3. (Previously presented) A method according to Claim 2, wherein the 
obtaining a second token of the sender step comprises the second token of 
the sender being sent as part of the sender's digital certificate. 

4. (Original) A method according to Claim 2, further comprising carrying 
out an on-line check of the validity of the sender's certificate. 

5. (Previously presented) A method according to Claim 1, wherein the 
first and second tokens of the sender comprise private and public 
encryption/decryption keys of the sender and the first and second tokens of 
the intended recipient comprise private and public encryption/decryption keys 
of the intended recipient. 
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6. (Original) A method according to Claim 1, further comprising printing 
out a copy of the document once the sender and the document have been 
authenticated. 

7. (Original) A method according to Claim 6, wherein the method further 
comprises printing a verifying mark on the printed copy of the document to 
signify its authenticity. 

8. (Original) A method according to Claim 1, wherein the transmitted 
document comprises a fax document. 
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9. (Previously presented) A method of sending and delivering a digital 
document to an intended recipient at a printout station together with data 
enabling the document and the sender to be authenticated, the method 
comprising: 

creating a digest of the document using a hash algorithm; 

obtaining a first token of the intended recipient; 

encrypting the digest using a first token of the sender; 

obtaining a second token of the sender relating to the first token of the 
sender, which can be used to decrypt the encrypted digest; 

encoding identification data of the intended recipient using the first 
token of the intended recipient; 

sending the encrypted digest, the digital document, the second token 
of the sender, and the encoded identification data to the recipient; 

receiving and securely retaining a transmitted document, the encoded 
identification data, and a transmitted independently verifiable data record of 
the intended recipient at a printout station; 

requesting proof of the intended recipient's identity at the printout 
station using data in the independently verifiable data record of the intended 
recipient; 

decoding the identification data of the intended recipient using a 
second token of the intended recipient; 

comparing the decoded identification data with contents of the 
independently verifiable data record to determine the authenticity of the 
recipient of the document; and 
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releasing the document when the intended recipient has proved their 
identity by use of the second token of the intended recipient that is uniquely 
related to the first token of the intended recipient. 

10. (Original) A method according to Claim 9, wherein the transmitted 
document is a fax document. 

11. (Previously presented) A method according to Claim 9, further 
comprising the sender proving their identity prior to the sending step by 
transferring data from a personal portable data carrier holding the first token 
of the sender to a transmission station from which the document is to be sent. 

12. (Original) A method according to Claim 11, wherein the proving step 
further comprises the sender entering a verifiable security identifier into the 
transmission station to establish that they are the legitimate owner of the 
portable data carrier. 

13. (Original) A method according to Claim 11, wherein the step of 
encrypting the digest comprises supplying the digest of the document from 
the transmission station to the portable data carrier of the sender, encrypting 
the digest of the document on the portable data carrier, and returning the 
encrypted digest of the document from the portable data carrier to the 
transmission station. 
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14. (Currently amended) A method according to any of Claim 9, further 
comprising obtaining details of the sender including the second token of the 
sender prior to transmitting the document. 

15. (Previously presented) A method according to Claim 14, wherein the 
step of obtaining details comprises obtaining the sender's details from a 
central database storing second tokens of the senders and other sender's 
details. 

16. (Previously presented) A method according to Claim 14, wherein the 
sender's details and the second token of the sender are provided in a 
sender's digital certificate. 

17. (Previously presented) A method according to any of Claim 9, wherein 
the first and second tokens of the sender comprise private and public 
encryption/decryption keys of the sender. 
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18. (Previously presented) A device for delivering and determining the 
authenticity of a digital document sent by an unknown sender to an intended 
recipient at a printout station, the device comprising: 

a communications module arranged to receive an electronic version of 
the transmitted document over a communications network, an independently 
verifiable data record of the intended recipient, a first token of the intended 
recipient, an encrypted digest of the document created by the sender using a 
hash algorithm, the digest being encrypted using a first token of the sender, a 
second token relating to the first token of the sender, and encrypted 
identification data of the intended recipient, the encrypted identification data 
being encrypted using a first token of the intended recipient; 

a store for securely retaining the transmitted document, the transmitted 
independently verifiable data record and the first token of the intended 
recipient; 

an instruction module for requesting proof of the intended recipient's 
identity using data provided in the intended recipient's data record; and 

a controller arranged to decode the encrypted digest using the second 
token of the sender; creating a digest of the document using a hash 
algorithm; comparing the decrypted received digest with the newly created 
digest to determine the authenticity of the sender and the document; and 
releasing the document when the intended recipient has proved their identity 
by use of a second token of the intended recipient that is uniquely related to 
the first token of the intended recipient, wherein the second token of the 
intended recipient is used to decode encrypted identification data of the 
intended recipient that is compared to contents of the independently verifiable 



data record of the intended recipient to determine authenticity of the intended 
recipient. 

19. (Previously presented) A device for sending and delivering a digital 
document to an intended recipient at a printout station together with data 
enabling the document and the sender to be authenticated, the device 
comprising: 

a controller arranged to create a digest of the document using a hash 
algorithm and to encrypt the digest using a first token of the sender and to 
encrypt identification data of the intended recipient using a first token of the 
intended recipient; and 

a communications module arranged to obtain a second token of the 
sender related to the first token of the sender, which can be used to decrypt 
the encrypted digest and to send the encrypted digest, the digital document, 
the second token of the sender, the encrypted identification data of the 
intended recipient, and the first token of the intended recipient to the 
recipient. 



9 



